Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/AOLRllHRMhyPZoIyb7sUmex1QAo.roa
File: AOLRllHRMhyPZoIyb7sUmex1QAo.roa (raw, json)
Hash identifier: 4gU9z1npy1vCD/aVhcvAWcgfmudVui0C/DFfpf4uSn8=
Subject key identifier: 00:E2:D1:96:51:D1:32:1C:8F:66:82:32:6F:BB:14:99:EC:75:40:0A
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 018CC348C99E183AD0C487E401C5B4DBD09E
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/AOLRllHRMhyPZoIyb7sUmex1QAo.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208864
IP address blocks: 185.42.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c9:9e:18:3a:d0:c4:87:e4:01:c5:b4:db:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e2d19651d1321c8f6682326fbb1499ec75400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:51:ea:f8:bd:e8:44:16:72:78:c6:d7:8d:
6b:11:f7:2c:94:b3:50:ec:f7:69:45:83:58:e8:6b:
84:99:e8:0b:60:ce:3e:97:61:3c:ed:cf:49:cc:92:
a6:2a:8f:88:62:47:ed:fa:f1:e7:35:eb:96:be:d4:
26:57:10:72:25:fd:52:2c:37:b1:f0:ff:a2:d9:f6:
fa:b4:20:ab:9c:e7:46:64:1a:aa:1c:bf:ba:c1:43:
ec:aa:07:59:cb:cf:55:ef:98:25:a3:42:dc:ef:5f:
0f:b3:8a:c5:21:97:38:43:b8:a9:87:95:42:ca:0c:
d7:e6:83:12:9b:a0:9b:6d:ed:01:90:45:ac:e7:05:
12:d4:d2:65:c4:a8:14:ef:f1:8f:ce:a2:c4:60:b6:
de:f7:eb:e9:cb:b6:38:a4:ef:6f:86:3e:c0:47:61:
94:21:62:37:42:00:ee:64:53:e3:a5:9b:f2:c0:c7:
2c:62:15:3b:7b:67:cc:61:70:7b:a1:05:27:31:f9:
e6:05:4c:53:1c:53:76:a0:11:5f:3a:d6:64:fe:49:
f6:9c:06:28:62:93:79:60:1a:d8:d2:e4:f2:96:aa:
a5:9b:b7:54:9c:dd:50:99:34:fa:a2:b9:a7:b4:29:
43:e9:c5:f7:db:51:da:46:2c:e6:f1:51:81:a0:3c:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:D1:96:51:D1:32:1C:8F:66:82:32:6F:BB:14:99:EC:75:40:0A
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/AOLRllHRMhyPZoIyb7sUmex1QAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6e:4b:77:16:88:e4:16:39:76:de:20:5a:bc:82:04:cb:01:
58:b0:85:60:79:4b:f4:fd:bb:79:54:5e:d6:21:df:1f:64:66:
a9:4d:ca:b5:b3:8b:69:c1:85:d2:d9:e6:d0:bb:b3:e1:87:09:
01:40:fb:b8:3e:f6:d7:27:9e:60:46:8b:f9:ae:43:16:26:5b:
ba:62:bb:31:f8:9a:fd:29:ed:48:5a:5c:b0:62:89:c5:f7:0a:
29:8b:85:ac:30:3b:e5:bf:e0:89:b2:9a:14:1c:1c:be:06:e2:
28:96:b6:d7:58:c4:ba:eb:59:6c:4d:4c:b4:f9:6d:7f:d6:a0:
eb:c4:c3:2b:6d:19:5f:bb:79:68:41:e6:4b:5f:0c:95:bc:63:
0a:ff:ad:ca:91:84:b9:24:5b:de:80:11:c8:5c:8c:8d:48:d5:
4b:5b:58:f3:60:8e:d0:18:8c:98:d7:f4:39:bd:b4:ef:33:99:
8d:62:a2:05:87:10:2f:53:20:b7:ca:c4:f5:0b:02:50:67:5b:
8f:79:8c:3a:07:61:d6:c0:d9:14:03:98:5d:48:5f:f3:6b:71:
a2:0f:b3:45:33:21:8d:5c:c4:6e:e9:e3:c2:fe:c6:6e:db:bb:
f9:c1:fa:d1:60:ef:6e:b6:b0:a3:28:47:61:b8:7b:84:fa:b6:
8c:bd:cf:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSMmeGDrQxIfkAcW029CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjQwMTAxMDQyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGUyZDE5NjUxZDEzMjFjOGY2NjgyMzI2ZmJiMTQ5OWVjNzU0MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZVR6vi96EQWcnjG141rEfcslLNQ
7PdpRYNY6GuEmegLYM4+l2E87c9JzJKmKo+IYkft+vHnNeuWvtQmVxByJf1SLDex
8P+i2fb6tCCrnOdGZBqqHL+6wUPsqgdZy89V75glo0Lc718Ps4rFIZc4Q7iph5VC
ygzX5oMSm6Cbbe0BkEWs5wUS1NJlxKgU7/GPzqLEYLbe9+vpy7Y4pO9vhj7AR2GU
IWI3QgDuZFPjpZvywMcsYhU7e2fMYXB7oQUnMfnmBUxTHFN2oBFfOtZk/kn2nAYo
YpN5YBrY0uTylqqlm7dUnN1QmTT6ormntClD6cX321HaRizm8VGBoDxAkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADi0ZZR0TIcj2aCMm+7FJnsdUAKMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvQU9MUmxsSFJNaHlQWm9JeWI3c1VtZXgxUUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSo7MA0G
CSqGSIb3DQEBCwUAA4IBAQBqbkt3FojkFjl23iBavIIEywFYsIVgeUv0/bt5VF7W
Id8fZGapTcq1s4tpwYXS2ebQu7PhhwkBQPu4PvbXJ55gRov5rkMWJlu6Yrsx+Jr9
Ke1IWlywYonF9wopi4WsMDvlv+CJspoUHBy+BuIolrbXWMS661lsTUy0+W1/1qDr
xMMrbRlfu3loQeZLXwyVvGMK/63KkYS5JFvegBHIXIyNSNVLW1jzYI7QGIyY1/Q5
vbTvM5mNYqIFhxAvUyC3ysT1CwJQZ1uPeYw6B2HWwNkUA5hdSF/za3GiD7NFMyGN
XMRu6ePC/sZu27v5wfrRYO9utrCjKEdhuHuE+raMvc8w
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:51:39 2024 by rpki-client on console-ams.rpki-client.org